There is no substitute for a proper, approved, cryptographic function where data needs to be protected at rest or in transit. Obfuscation is rarely the correct choice. Use standard-approved functions and consider all cryptographic management requirements (e.g. key creation, distribution, protection, replacement, retirement).
Kyun can access data because it has been obfuscated rather than using an approved cryptographic function
Owasp ASVS (4.0): 6.2.2
Capec:
Owasp SCP: 105,133,135
Owasp Appsensor:
Safecode: 21,29
Password Guessing/Brute Force Attacks
Loading comments 0%